[ CVE-2026-101446 · Published 20 Oct 2026 ]

Vulnerability in Oracle Corporation Siebel CRM Cloud Applications

CVSS 9.9 EPSS <1%1 agency advisoryNo fix listed yet

[ Why it matters ]Priority signals

Critical severity: CVSS 9.9

[ Description ]Official description

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund20 Oct 2026WID-SEC-2026-4084

Oracle Siebel CRM: Multiple vulnerabilities Translated from German
Risk highCVE-2026-11332CVE-2026-91427CVE-2026-101444+118 more CVEs

[ References ]References

www.oracle.com/security-alerts/cpuoct2026.html